CVE-2025-4095: Registry Access Management (RAM) policies not applied when sign-in enforcement is configured via a configuration profile
Published Apr 29, 2025
·Updated
Registry Access Management (RAM) is a security feature allowing administrators to restrict access for their developers to only allowed registries. When a MacOS configuration profile is used to enforce organization sign-in, the RAM policies are not being applied, which would allow Docker Desktop users to pull down unapproved, and potentially malicious images from any registry.
Affected Software
1 affected component
Docker Docker Desktop
Event History
Apr 29, 2025
CVE Published
via MITRE·05:16 PM
Data Sourced
via MITRE·05:16 PM
DescriptionWeakness
Data Sourced
via NVD·06:15 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2025-4095?
CVE-2025-4095 has been rated as a medium severity vulnerability.
2
How do I fix CVE-2025-4095?
To fix CVE-2025-4095, ensure that the RAM policies are properly enforced in MacOS configurations.
3
What software is affected by CVE-2025-4095?
CVE-2025-4095 affects Docker Desktop on MacOS.
4
What are the implications of not addressing CVE-2025-4095?
Not addressing CVE-2025-4095 could allow unauthorized access to restricted registries by developers.
5
When was CVE-2025-4095 reported?
CVE-2025-4095 was reported in 2025.